Entitlements Pyramid Scheme

There's a new pyramid scheme hitting the world of identity called entitlements management. It's sprouted up as a new space and lots of vendors are selling standalone entitlement management solutions that customers purchase and deploy in to their environments. I just don't get it! Web Access Management solutions were built to do this. Rather than create a completely separate solution to deploy and maintain in your environment why not leverage that?

So . . . This rant is aimed at telling you three things about Sun's entitlement management plans.

1. We are in the process of expanding OpenSSO to handle Fine Grained Authorization / Entitlement Management out-of the box! We will NOT sell you another thing that you need to deploy in to your datacenter.

2. You will see this in OpenSSO Express by late Spring / Early Summer! Yep. This one is in the works and it's going to be very cool. We have some slick ideas and this is going to be our next "fedlet."

3. It will be all be open source! You heard that right. Everything we do will be available via the opensso community and free to use. If you are interested in contributing let us know.

Sun will be the ONLY provider to offer a single solution that not only does access controls, federation and secure web services, but also entitlement management. Stay tuned for more to come!!!!

Yeah, I completely agree. I was ranting about this exact fact almost 2 years ago and even had a back and forth debate with Securent CEO Rajiv Gupta (obviously now with Cisco following their acquisition).

I gave up eventually though because the market insisted on using the "entitlement management" name to describe fine-grained authorisation. Nice to hear Sun has plans to put "entitlement management" where I think it belongs.